6903 matches found
agent-governance-toolkit
๐ English | Espaรฑol | ๆฅๆฌ่ช | ็ฎไฝไธญๆ | ํ๊ตญ์ด | ็น้ซไธญๆ Agent Governance Toolkit Ship agents to production without losing sleep ๐Quick Start ยท ๐ Specifications ยท ๐ฆ PyPI ยท ๐ Changelog -brightgreen !IMPORTANT Public Preview -- production-quality public preview releases...
Massive-Web-Application-Penetration-Testing-Bug-Bounty-Notes
Penetration Testing, Beginners To Expert! This guide is designed for both beginners and experienced penetration testers. It covers all aspects of web application penetration testing, including foundational concepts, setting up testing environments with tools such as Burp Suite and bWAPP, and...
VAmPI
VAmPI The Vulnerable API Based on OpenAPI 3 VAmPI is a vulnerable API made with Flask and it includes vulnerabilities from the OWASP top 10 vulnerabilities for APIs. It was created as I wanted a vulnerable API to evaluate the efficiency of tools used to detect security issues in APIs. It includes...
AWSGoat
AWSGoat : A Damn Vulnerable AWS Infrastructure Compromising an organization's cloud infrastructure is like sitting on a gold mine for attackers. And sometimes, a simple misconfiguration or a vulnerability in web applications, is all an attacker needs to compromise the entire infrastructure. Since...
ARTLAS
ARTLAS Apache Real Time Logs Analyzer System Real time Apache log analyzer, based on top 10 OWASP vulnerabilities, identifies attempts of exploration in your web application, and notify you or your incident team on Telegram, Zabbix and Syslog/SIEM. ARTLAS uses the regular expression from the...
nysm
nysm A stealth post-exploitation container. Table of Content 1. Introduction 2. Installation 2.1 Requirements 2.2 Linux headers 2.3 Build 3. Usage 3.1 Examples 4. How it works 4.1 In general 4.2 Hide eBPF objects 4.3 Hide Auditd logs 4.4 Hide PIDs 4.5 Hide sockets 5. Limitations Introduction...
pygoat
PyGoat intentionally vuln web Application Security in django. our roadmap build intentionally vuln web Application in django. The Vulnerability can based on OWASP top ten Table of Contents pygoat Installation Docker Compose recommended From Sources Windows Notes Installation Video Uninstallation...
Top10
Top10 Official OWASP Top 10 Document Repository OWASP Top 10 2025 - RELEASED We have released the OWASP Top 10:2025 Final: OWASP Top10:2025 Please log any feedback, comments, or log issues here. OWASP Top 10 2021 - SUPERSEDED OWASP Top10:2021 OWASP Top 10 2017 - HISTORIC OWASP Top 10:2017 PPTX...
API-Security
OWASP API Security Top 10 This project is designed to address the ever-increasing number of organizations that are deploying potentially sensitive APIs as part of their software offerings. These APIs are used for internal tasks and to interface with third parties. Unfortunately, many APIs do not...
hate_crack
/ | \ / | \ \ | | / \ \ / \ / \ /\ \ \ / | |/ / \ Y // | | \ / \ | | // \ | \ /|| /\ | \ / / // / / / / Installation Installing from source is the only supported path. hatecrack is not distributed on PyPI: pip install hate-crack resolves to a 0.0.0 placeholder that fails on purpose...
TOP
TOP all Top Top TopCodeql TOP All bugbounty pentesting CVE-2022- POC Exp Things Table of Contents 2026 year top total 30 2025 year top total 30 2024 year top total 30 2023 year top total 30 2022 year top total 30 2021 year top total 30 2020 year top total 30 2026 star| updatedat| name| url| des...
www-project-top-10-for-large-language-model-applications
www-project-top-10-for-large-language-model-applications OWASP Foundation Web Repository OWASP Top 10 for Large Language Model Applications Welcome to the official repository for the OWASP Top 10 for Large Language Model Applications! About This Repository This repository contains the OWASP Top 1...
adapt
Summary ADAPT is a tool that performs Automated Dynamic Application Penetration Testing for web applications. It is designed to increase accuracy, speed, and confidence in penetration testing efforts. ADAPT automatically tests for multiple industry standard OWASP Top 10 vulnerabilities, and outpu...
Serverless-Top-10-Project
This is the markdown version of the OWASP Top 10 - Serverless Interpretation report...
training-application-security
Free Secure Coding & Application Security Training โ Open Source SCORM Exercises 40 free, open-source secure coding exercises that teach web application security the way developers learn โ by exploiting real vulnerabilities like SQL injection, cross-site scripting XSS, and broken access control,...
skill-scanner
Skill Scanner A best-effort security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns. It combines pattern-based detection YAML + YARA-X, AST and dataflow analysis , an optional LLM-as-a-judge , and a bounded CEL decision layer over typed...
DonkAI
Hands-on lab for the OWASP Top 10 for LLM Applications 2025 - no real LLM required. DonkAI is deliberately vulnerable web app you can run in one command and use to learn how LLM-integrated systems get broken by actually breaking them. Every OWASP LLM Top 10 category is represented by at least one...
zi
Zi Manage your Zsh plugins, snippets, and command-line tools. Quick start ยท Documentation ยท Releases ยท Discussions Zi is the Z-Shell ecosystem's plugin manager, formerly known as zplugin and zinit. Features Responsive startup: defer plugin loading until after the first prompt with Turbo mode...
OFFAT
OWASP OFFAT OFFensive Api Tester โ source-aware API security testing. Maps your API from code, proves sourceโsink paths on a code graph, executes tests with a Rust engine, and triages the results with AI. Documentation ยท Install ยท Usage ยท GitHub Action Authorized use only. Live runs send real...
dvna
Damn Vulnerable NodeJS Application DVNA Damn Vulnerable NodeJS Application DVNA is a simple NodeJS application to demonstrate OWASP Top 10 Vulnerabilities and guide on fixing and avoiding these vulnerabilities. The fixes branch will contain fixes for the vulnerabilities. Fixes for vulnerabilities...